Information on the protection and processing of personal data
This information has been prepared in accordance with the laws of the Republic of Turkey and within the framework of Law No. 6698 on the Protection of Personal Data (KVKK).
This site is operated by an entity established in Turkey; data processing is carried out under Turkish law.
1. Data controller
EduTech Travels Anonim Şirketi
- MERSIS-Nr.: 0123456789000014
- VKN (tax number): 1234567890
- Address: Maslak Mah. Büyükdere Cad. No: 123, Spine Tower, Kat: 15, 34398 Sarıyer / Istanbul, Turkey
- E-mail: [email protected]
- Telephone: +90 (212) 555 00 00
2. Categories of data processed
Data processed may include:
- identity and contact data,
- content of inquiries and messages,
- site visit and traffic data (logs),
- security logs,
- technical device and connection data.
3. Purposes of processing
- responses to contact inquiries,
- carrying out service processes,
- ensuring information security,
- fulfilment of legal obligations,
- maintenance of evidence in possible legal disputes.
4. Legal bases
Depending on the type of processing, in particular: KVKK 5/2(c), 5/2(ç), 5/2(e) and 5/2(f) may apply.
5. Recipients of data
Personal data may be transferred — in a manner related and proportional to the purpose — to:
- hosting and infrastructure service providers,
- legally authorised public authorities,
- authorised third parties in cases required by law.
6. Methods of data collection
Data may be collected via electronic forms, e-mail, cookies, server logs and similar automated methods.
7. Rights of data subjects (KVKK Art. 11)
- access to information about processing,
- rectification,
- erasure / destruction,
- objection,
- possible compensation within legal limits.
8. Procedure for requests
Requests are received in accordance with KVKK Art. 13 — in writing or by means established by the Data Protection Board — and are generally responded to within 30 days.
9. Retention periods
Retention periods are determined by legal requirements and processing purposes. After the period expires, data are deleted, destroyed or anonymised.
Note: This text is for information. Before going live, a legal review is recommended to ensure full compliance.